This patch should not be applied as-is; as Chris mentions, the correct
thing to do is to modify the settings in the VPN connection.

A valid workaround for n-m-openvpn would require also modifying either
the value entered in the dialog to strip out part of the value (anything
up and including "CN=") and keeping 'name' as the piece to validate via
verify-x509-name; or using "subject" instead, and requiring the use of a
fully-formed DN in the dialog.

I think this should be "Won't Fix". It's unfortunate that we are stuck
dealing with this fallout in the release, but there doesn't appear to be
a foolproof way to transition configs (what is used for "tls-remote"
currently is arbitrary, and can vary between installations).

** Tags added: patch-needswork

** Changed in: network-manager-openvpn (Ubuntu Zesty)
       Status: In Progress => Incomplete

** Changed in: network-manager-openvpn (Ubuntu Zesty)
       Status: Incomplete => Triaged

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1666912

Title:
  Invoking openvpn removed option --tls-remote

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/network-manager-openvpn/+bug/1666912/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to